security sql fix